Add pundit

Restrict access to certain profile show pages based on user roles. So for example if the current user is an admin, they can see more of the users in the directory than a person who is just a student or not logged in.